Interceptor-based data encryption method and apparatus, and computer equipment

Abstract

The invention discloses an interceptor-based data encryption method and apparatus, computer equipment and a storage medium, and relates to the big data and blockchain technology. The method comprisesthe steps: obtaining personal verification information through a reflection mechanism if a first pre-compiled SQL statement is intercepted through a Mybatis interceptor; obtaining an initial master key and an initial working key which are randomly generated, and encrypting the personal verification information by using the initial working key to obtain encrypted personal verification information;storing the personal verification information into a current data table to obtain an updated data table; if a second pre-compiled SQL statement is intercepted through the Mybatis interceptor, obtaining a corresponding result set in the updated data table of the database; and decrypting to obtain a decrypted result set. According to the method, the personal verification information is automaticallyencrypted before entering the database and is automatically decrypted when coming out, so that the data security is improved, the encryption and decryption processes are fully automatically carried out, and the encryption and decryption efficiency is improved.

Description

technical field [0001] The invention relates to the technical field of data processing of big data, in particular to an interceptor-based data encryption method, device, computer equipment and storage medium. Background technique [0002] At present, when storing data in a MySQL database, if the data includes sensitive data such as personal verification information, two methods are generally used for encryption. The first is to encrypt the table space that stores personal verification information, and the second is to call Utils, an encryption tool, to encrypt and decrypt personal verification information. [0003] When using the encryption method for the table space, the keyring_file plug-in of the MySQL community version (which is an encryption plug-in) is generally used. The master key obtained after the keyring_file plug-in encrypts the table space (the Master Key is used to decrypt the table space), The Master Key is generally stored in the local database server, and t...

AI Technical Summary

Problems solved by technology

[0005] The embodiment of the present invention provides an interceptor-based data encryption method, device, computer equipment, and storage medium, aiming to solve the problem of using the entire data table when sensitive data such as personal verification information is stored in the data table in the prior art. Entire encryption or local encryption using special encryption tools is not only complicated, but also administrators can still view the data after encryption, resulting in low data security.

Images